===== enforcement-check-2: SHA-level check failure does NOT block merge =====
[{"completed_at":"2026-05-03T22:54:36Z","conclusion":"skipped","name":"ci/guard","status":"completed"},{"completed_at":"2026-05-03T22:54:36Z","conclusion":"skipped","name":"gemini-review-gate","status":"completed"},{"completed_at":"2026-05-03T22:54:36Z","conclusion":"skipped","name":"merge-safety-check","status":"completed"},{"completed_at":"2026-05-03T22:54:36Z","conclusion":"failure","name":"qc-check","status":"completed"},{"completed_at":"2026-05-03T22:54:35Z","conclusion":"success","name":"hidden-path-audit","status":"completed"},{"completed_at":"2026-05-03T22:54:36Z","conclusion":"success","name":"lock-in-check","status":"completed"},{"completed_at":"2026-05-03T22:54:03Z","conclusion":"success","name":"cancel-kill-switch","status":"completed"}]
exit_code=0

===== merged_at vs check_run completion times =====
{"head_sha":"db341a083add39be8da8ed496b22328137c55f6f","merge_commit_sha":"49c1f0dffbfe531365b974b79152a49d04fa1b3f","merged_at":"2026-05-03T22:54:19Z"}

===== finding =====
qc-check completed_at=22:54:36 with conclusion=failure
PR merged_at=22:54:19 — *17 seconds before* qc-check completed
Server-side enforcement absent — confirmed via GitHub raw response